- Vulnerability/
- RHSA-2023:6256
RHSA-2023:6256: Important: OpenShift Container Platform 4.13.21 security and extras update
First published: Wed Nov 08 2023(Updated: )
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.<br>There are no RPM packages for this update.<br>Security Fix(es):<br><li> golang: net/http, x/net/http2: rapid stream resets can cause excessive work (Rapid Reset Attack) (CVE-2023-39325)</li> A Red Hat Security Bulletin which addresses further details about the Rapid Reset flaw is available in the References section.<br>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>All OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at <a href="https://docs.openshift.com/container-platform/4.13/updating/updating-cluster-cli.html" target="_blank">https://docs.openshift.com/container-platform/4.13/updating/updating-cluster-cli.html</a>
| Affected Software | Affected Version | How to fix |
|---|
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of RHSA-2023:6256?
The severity of RHSA-2023:6256 is categorized as critical due to potential security risks.
How do I fix RHSA-2023:6256?
To fix RHSA-2023:6256, apply the available updates and patches provided by Red Hat.
Which versions of Red Hat OpenShift Container Platform are affected by RHSA-2023:6256?
RHSA-2023:6256 affects all currently supported versions of Red Hat OpenShift Container Platform.
What vulnerabilities are addressed in RHSA-2023:6256?
RHSA-2023:6256 addresses security vulnerabilities in the golang net/http and x/net/http2 packages related to rapid stream resets.
Is there a workaround for RHSA-2023:6256?
Currently, there are no known workarounds for RHSA-2023:6256, so the recommended action is to apply the updates promptly.
- agent/references
- agent/severity
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- agent/title
- agent/tags
- agent/description
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2023:6256